$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3e4ff982-52b1-3a30-a2d8-5d1a4d1d017a.roa File: 3e4ff982-52b1-3a30-a2d8-5d1a4d1d017a.roa (raw, json) Hash identifier: ellr/AbGZ+ieAGLdT8KNRIRkovWORzocI/bNObL/ozU= Subject key identifier: CF:D9:B7:19:E2:43:20:10:4D:54:66:EC:13:C4:79:7D:F3:D2:AD:27 Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Certificate serial: 010D0C9F4328584B6201DEA3CB7FA0D7F9BB4F00 Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3e4ff982-52b1-3a30-a2d8-5d1a4d1d017a.roa Signing time: Thu 02 Oct 2025 01:00:31 +0000 ROA not before: Thu 02 Oct 2025 01:00:31 +0000 ROA not after: Wed 31 Dec 2025 02:00:31 +0000 asID: 30036 IP address blocks: 173.24.228.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 13 Oct 2025 01:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4b:62:01:de:a3:cb:7f:a0:d7:f9:bb:4f:00 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc Validity Not Before: Oct 2 01:00:31 2025 GMT Not After : Dec 31 02:00:31 2025 GMT Subject: CN=ba1def3e-b227-4b33-b5c9-b0ab272eeac1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a1:9e:a4:a7:d7:1c:df:23:58:c5:e0:97:b6:53: e9:f4:22:c6:6a:48:78:d8:09:d2:e6:5c:ba:95:60: ad:ac:80:7b:58:f4:fe:83:d1:4e:bb:6a:9f:5a:26: 9b:7b:9e:17:f2:f7:1a:e1:be:c6:16:97:ae:62:f5: df:97:41:32:c7:e5:26:54:5c:0d:60:10:e1:78:8a: c5:ee:ce:35:58:ad:88:54:62:26:69:c6:1e:3a:86: 62:bf:00:3a:7b:f7:e2:32:97:d6:40:e6:92:fc:8b: b4:ec:1a:1c:64:a7:db:5e:c0:4f:88:ea:d5:98:dc: a0:c1:76:2c:cf:63:83:a6:fd:26:df:2c:16:37:6d: f1:ca:a5:5e:83:0f:d1:4b:a5:26:4e:44:fa:ab:31: a4:dd:8a:90:a5:33:d9:b9:bc:a3:a8:49:14:56:3b: ae:29:82:c4:ee:c0:04:d7:4b:a6:18:67:df:2b:0e: 9f:69:57:11:82:df:f1:f2:7b:0f:5a:82:d1:bb:89: 7e:e4:0b:93:6f:64:3e:03:91:d4:d9:c9:3e:9a:93: 61:8a:05:36:7f:d0:08:47:ae:72:98:28:e3:85:47: b4:35:76:47:03:4a:67:7d:50:0d:a9:c9:6c:12:2e: e4:d1:bd:69:60:44:68:57:69:4c:4c:ce:05:62:16: ed:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CF:D9:B7:19:E2:43:20:10:4D:54:66:EC:13:C4:79:7D:F3:D2:AD:27 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3e4ff982-52b1-3a30-a2d8-5d1a4d1d017a.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl X509v3 Authority Key Identifier: keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer sbgp-ipAddrBlock: critical IPv4: 173.24.228.0/23 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption 01:88:48:61:2b:2b:40:fe:d7:f9:07:75:69:7e:ec:e2:6b:63: f5:be:33:38:fe:90:93:4e:4a:c0:7f:b7:1a:a8:bc:f1:f6:13: a8:a6:c6:7f:6f:9d:a4:f5:a1:87:a0:40:39:48:59:f3:23:d3: b1:db:af:a1:13:82:7c:73:c4:b9:5b:f1:ce:52:08:af:69:9b: e2:dc:cb:73:f4:4d:ef:ec:e1:d8:b7:50:4d:4c:50:e6:73:c2: 04:f3:fa:68:82:4f:85:4a:00:c6:03:ab:6d:36:8f:a5:43:ff: 96:2b:e8:88:89:01:c3:6c:67:d7:8a:00:e4:28:9e:11:f9:35: 4c:d9:e0:36:24:9e:70:4f:9e:dc:ca:2b:88:e1:c4:bc:13:1b: 66:45:17:89:e3:49:b3:2d:ea:59:cb:d1:d0:48:de:d0:36:6f: f5:81:2c:0a:c5:86:1f:39:4c:99:c9:47:56:c6:2a:d5:b9:51: c8:b7:ad:e7:5b:04:37:b1:b1:19:5f:0b:b5:c6:dd:76:2c:fd: 44:db:02:fb:6d:40:0c:99:8d:83:dd:77:21:b1:64:d7:76:72: 8a:1a:a9:b2:36:f2:35:05:c8:a0:11:25:8f:e0:0f:25:eb:93: 41:a4:5b:66:cb:be:1f:38:5d:f1:d6:54:63:5a:5b:fe:a8:9d: fc:d5:86:b7 -----BEGIN CERTIFICATE----- MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEtiAd6jy3+g1/m7TwAwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk ZmRjMB4XDTI1MTAwMjAxMDAzMVoXDTI1MTIzMTAyMDAzMVowLzEtMCsGA1UEAxMk YmExZGVmM2UtYjIyNy00YjMzLWI1YzktYjBhYjI3MmVlYWMxMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZ6kp9cc3yNYxeCXtlPp9CLGakh42AnS5ly6 lWCtrIB7WPT+g9FOu2qfWiabe54X8vca4b7GFpeuYvXfl0Eyx+UmVFwNYBDheIrF 7s41WK2IVGImacYeOoZivwA6e/fiMpfWQOaS/Iu07BocZKfbXsBPiOrVmNygwXYs z2ODpv0m3ywWN23xyqVegw/RS6UmTkT6qzGk3YqQpTPZubyjqEkUVjuuKYLE7sAE 10umGGffKw6faVcRgt/x8nsPWoLRu4l+5AuTb2Q+A5HU2ck+mpNhigU2f9AIR65y mCjjhUe0NXZHA0pnfVANqclsEi7k0b1pYERoV2lMTM4FYhbtLwIDAQABo4IDVTCC A1EwHQYDVR0OBBYEFM/ZtxniQyAQTVRm7BPEeX3z0q0nMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0 OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2U0ZmY5ODItNTJiMS0z YTMwLWEyZDgtNWQxYTRkMWQwMTdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2 MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi YzEwMGRmZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrRjkMFQG A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93 d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL BQADggEBAAGISGErK0D+1/kHdWl+7OJrY/W+Mzj+kJNOSsB/txqovPH2E6imxn9v naT1oYegQDlIWfMj07Hbr6ETgnxzxLlb8c5SCK9pm+Lcy3P0Te/s4di3UE1MUOZz wgTz+miCT4VKAMYDq202j6VD/5Yr6IiJAcNsZ9eKAOQonhH5NUzZ4DYknnBPntzK K4jhxLwTG2ZFF4njSbMt6lnL0dBI3tA2b/WBLArFhh85TJnJR1bGKtW5Uci3redb BDexsRlfC7XG3XYs/UTbAvttQAyZjYPddyGxZNd2cooaqbI28jUFyKARJY/gDyXr k0GkW2bLvh84XfHWVGNaW/6onfzVhrc= -----END CERTIFICATE-----Generated at Sat Oct 11 02:48:46 2025 by rpki-client